Static task
static1
Behavioral task
behavioral1
Sample
46b30d9b23e6616ce3b8332adfda9dcc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46b30d9b23e6616ce3b8332adfda9dcc.exe
Resource
win10v2004-20231215-en
General
-
Target
46b30d9b23e6616ce3b8332adfda9dcc
-
Size
180KB
-
MD5
46b30d9b23e6616ce3b8332adfda9dcc
-
SHA1
8d1807647cbe04fd36afe94c7fad1eb512d5898e
-
SHA256
7df796aa13998f1ca70f52a979ffdda9e0c76b561fa9ff4653bbad7132e05b75
-
SHA512
5e68cb8ebfd814949ee1136e0d24fece953bf4cb78e689ce4c9acc77dfb963410587256e698c39cf684611c9c470d72accdd3dc223378855a103ab19c1a906fb
-
SSDEEP
3072:AQlSaj3/HPH1ghay+eIjl9yw5y5o1YX3zOYz2piAERdEKLWpW/:Zj3/HPH1Sl+eIjl9jMe1MzXRA8rLWE/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46b30d9b23e6616ce3b8332adfda9dcc
Files
-
46b30d9b23e6616ce3b8332adfda9dcc.exe windows:4 windows x86 arch:x86
30e216fbbb33a7ba3d4b5e7c747efe7f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegOpenKeyExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
OpenSCManagerA
shell32
SHGetSpecialFolderPathA
user32
wsprintfA
ole32
CoCreateInstance
CoInitialize
CoCreateGuid
shlwapi
SHGetValueA
SHSetValueA
SHEnumKeyExA
StrStrIA
SHEnumValueA
rpcrt4
UuidToStringA
msvcrt
strerror
islower
isxdigit
isalnum
isspace
malloc
fclose
fwrite
fopen
sprintf
strcat
strcpy
ispunct
memset
memcpy
rand
memcmp
atoi
strncpy
wcscpy
mbstowcs
srand
time
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
isalpha
__mb_cur_max
wctomb
isupper
isgraph
??2@YAPAXI@Z
tolower
strlen
printf
imagehlp
ImageNtHeader
kernel32
GetLastError
FindFirstFileA
GetModuleHandleA
GetPrivateProfileStringA
FindNextFileA
WideCharToMultiByte
SleepEx
GetLocalTime
GetVersionExA
ExitProcess
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
lstrlenA
GetSystemDirectoryA
GetStartupInfoA
GetFileAttributesA
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE